2904 matches found
PT-2023-10004 · Unknown · Fanzila Webfinance
Name of the Vulnerable Software and Affected Versions: fanzila WebFinance version 0.5 Description: A critical issue has been found in the file htdocs/admin/save Contract Signer Role.php, where the manipulation of the argument n/v leads to sql injection. Recommendations: Apply the patch identified...
Exploit for Classic Buffer Overflow in N-Prolog_Project N-Prolog
Description for CVE-2022-43343 N-Prolog v1.91 was discovered...
New Backdoor Created Using Leaked CIA's Hive Malware Discovered in the Wild
Unidentified threat actors have deployed a new backdoor that borrows its features from the U.S. Central Intelligence Agency CIA's Hive multi-platform malware suite, the source code of which was released by WikiLeaks in November 2017. "This is the first time we caught a variant of the CIA Hive...
kulinarika.net Cross Site Scripting vulnerability OBB-3118623
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-20560
Product: AndroidVersions: Android kernelAndroid ID: A-212623833References: N/A...
Citrix Analytics shows many 'Not Categorized' items under Performance Tab
Citrix Analytics will show manyNot Categorized items Citrix Cloud Monitor will show RTT asN/A...
Checking PVS targets for processes with high disk reads
In PVS environments when weak target device performance is encountered, slow boot, slow application opening, there are a several places to check for insights into the source of the problem. One common source ofweak target device performance is an unexpected volume of read requests from target...
n-century.net Cross Site Scripting vulnerability OBB-3070752
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
SUSE: Security Advisory (SUSE-SU-2022:4085-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-40903
Aiphone GT-DMB-N 3-in-1 Video Entrance Station with NFC Reader 1.0.3 does not mitigate against repeated failed access attempts, which allows an attacker to gain administrative privileges...
CVE-2022-40903
CVE-2022-40903 concerns Aiphone GT-DMB-N/GT-DMB/GT-DMB-LVN and GT-DB-VN video entry systems. Connected sources describe an information disclosure vulnerability (CWE-200) allowing an attacker with access to obtain sensitive device information. The affected firmware versions are GT-DMB-N/GT-DMB/GT-...
CVE-2022-40903
Aiphone GT-DMB-N 3-in-1 Video Entrance Station with NFC Reader 1.0.3 does not mitigate against repeated failed access attempts, which allows an attacker to gain administrative privileges...
CVE-2022-40903
Aiphone GT-DMB-N 3-in-1 Video Entrance Station with NFC Reader 1.0.3 does not mitigate against repeated failed access attempts, which allows an attacker to gain administrative privileges...
PT-2022-23627 · Intel · Intel Nuc 10 Performance Mini Pcs +1
Name of the Vulnerable Software and Affected Versions: IntelR NUC 10 Performance Kits and IntelR NUC 10 Performance Mini PCs versions prior to FNCML357.0053 Description: The issue is related to improper access control in BIOS firmware, which may allow a privileged user to enable escalation of...
CVE-2022-43343
N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken at Main.c...
CVE-2022-43343
N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken at Main.c...
Buffer overflow
N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken at Main.c...
N-Prolog 安全漏洞
N-Prolog is an Arity/Prolog32-compatible interpreter and compiler from the individual developer kenichi sasagawa. A security vulnerability exists in N-Prolog v1.91, which stems from the inclusion of a global buffer overflow in the function gettoken in Main.c. The vulnerability is caused by the...
CVE-2022-43343
CVE-2022-43343 concerns N-Prolog v1.91, where a global buffer overflow is reported in the function gettoken() at Main.c. The vulnerability is documented with a faulty write into a global buffer, as demonstrated by an AddressSanitizer report pointing to parser.c:1022 and noting proximity to global...